What’s Vulnerable › Vulnerabilities

CVE-2026-23280: accel/amdxdna: Prevent ubuf size overflow

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-25 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Prevent ubuf size overflow The ubuf size calculation may overflow, resulting in an undersized allocation and possible memory corruption. Use check_add_overflow() helpers to validate the size calculation before allocation.

Affected products

• Linux kernel: from 6.18 before 6.18.17; from 6.19 before 6.19.7; 7.0-rc1 — fixed in 6.18.17, 6.19.7

How to fix

Upgrade to a fixed version: Linux kernel 6.18.17, 6.19.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/03808abb1d868aed7478a11a82e5bb4b3f1ca6d6
• https://git.kernel.org/stable/c/1500b31db94374a6669e73ce94d6f71cf8e85e06
• https://git.kernel.org/stable/c/972bf4a23478fcb247b4f507d47a584bc8aea5bd

Get alerted when CVE-2026-23280 or the next vulnerability affects your stack